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REMARKS 

Claims 1 and 22 have been amended. Claims 2-21 stand as 
previously presented. 

Claims 1-22 were considered in the Office Action. 
5 Claims 1-22 stand provisionally rejected under the 

judicially created doctrine of obviousness-type double 
patenting as being unpatentable over claims 1-20 of copending 
Application No. Q9/5B4,252. Claims 1-22 stand rejected 35 
U.S.C, 103(a) as being unpatentable- over McNeil et al., U.S. 
10 Patent 6,167,052 (hereinafter McNeil) in view of Ahmed et al., 
U.S. Patent 5,432,785 (hereinafter Ahmed). 

Applicants acknowledge the provisional rejection under 
the judicially created doctrine of obviousness-type double 
patenting over claims 1-20 of copending Application No. 
15 09/584 , 252. The rejection will be addressed when either 
Application No. 09/584,252 or the currently pending 
application have been issued. 

The Applicants believe that the currently pending claims 
are not anticipated by or obvious over the cited references 
20 and respectfully request reconsideration. 

Claim 1 

The cited references do not disclose or suggest: 

"A method of securely connecting a plurality of client 
computers to computer resources in a shared computer system, 
25 comprising: 

associating each of said plurality of client 
computers with at least one virtual private network 
connection, wherein said plurality of client computers 
are remotely connected to at least one virtual private 
30 network termination device in said shared computer 
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system, said, shared computer system comprising an 
application service provider, and wherein said at least 
one virtual private network connection is established by 
said at least one virtual private network termination 

5 device; 

associating said at least one virtual private 
network connections witb a plurality of virtual local 
area networks; and 

associating at least one of said computer resources 
10 in said shared computer system with each of said 

plurality of virtual local area networks , whereby a 
domain for each of said plurality o£ client computers is 
extended to include said computer resources in said 
application service provider and said plurality of client 
15 computer domains are isolated from each other within said 

application service provider." 
(Claim 1, as amended, emphasis added) 

At least the above highlighted features which 
differentiate embodiments of the present invention from the 

20 cited references are features that are not anticipated by the 
cited references and would not have been obvious to a person 
with ordinary skill in the art having the cited references. 
McNeill and Ahmed do not disclose or suggest a shared computer 
system, particularly an application service provider, in which 

25 the domains of multiple clients sharing resources in the 

application service provider are completely isolated from each 
other* 

Although McNeill does disclose a plurality of VLANS (see 
McNeill, FIG. 2), they all appear in a single domain, the 
30 "Layer 2 Domain" shown in, McNeill, FIG- 2. McNeill therefore 
does not disclose or suggest the claimed shared computer 
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system in which multiple client domains are extended and 
isolated- Similarly, Ahmed does not disclose a shared 
computer system in which multiple client domains are extended 
and isolated. For example, Ahmed FIG- 4 illustrates multiple 
5 customers that share a virtual path link 58 and a broadband 
switching system 61, but clearly shows that the customer 
locations are isolated at each end of the connection, rather 
than extending into ' a shared computer system. McNeill and ■ 
Ahmed are not directed at the same problem of isolating client 
10 domains from each other within a shared computer system of an 
application service provider. There i3 therefore no 
motivation to combine the cited references to create the 
claimed invention, and even if the references were combined, 
they still do not disclose the claimed invention. 
15 Applicants believe that currently pending claim 1 is 

allowable over the cited references and respectfully request 
reconsideration. 

Dependent claims 2-15 depend ultimately upon independent 
claim 1 which is allowable over the cited art as discussed 
20 above. These dependent claims are likewise in condition for 
allowance at least because they depend on an allowable 
independent claim. However, dependent claims 2-15 are 
independently allowable at least in that they recite 
particular features which, when combined with the elements of 
25 the independent claim, are also not disclosed or suggested in 
the cited references . 

Claim 16 

The cited references do not disclose or suggest: 

"A secure computer system, comprising: 
30 a plurality of computer resources ; 

at least one virtual local area network switch 
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electrically connected to said plurality of computer 
resources ; 

at least one virtual private network termination 
device electrically connected to said at least one 
5 virtual local area network switch, wherein said at least 

one virtual local area network switch is configurable to 
changeably connect a plurality of virtual private network 
connections in said at least one virtual private network 
termination device to at least one of said plurality of 
10 computer resources while isolating said plurality of 

virtual private network connections from one another; and 

a configuration engine electrically connected to 
said at least one virtual local area network switch, said 
configuration engine comprising computer readable program 
15 code for configuring said at least one virtual local area 

network switch to changeably connect each of said 
plurality of virtual private network connections to at 
least one of said 1 plurality of computer resources while 
isolating said plurality of virtual private network 
2 0 connections from one another , " 

(Claim 16, emphasis added) 

Applicants repeat the arguments for allowability set 
forth above with respect to claim 1, but specifically directed 
to the secure computer system of claim 16* 

25 Furthermore, the cited references do not disclose a 

configuration engine that configures a VLAN switch to 
changeably connect each of a plurality of VPN connections to a 
plurality of computer resources while isolating the VPN 
connections from one another. 

30 Dependent claims 17-21 depend ultimately upon independent 

claim 16 which is allowable over the cited art as discussed 
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above. These dependent claims are likewise in condition for 
allowance at least because they depend on an allowable 
independent claim. However, dependent claims 17-21 are 
independently allowable at least in that they recite 
5 particular features which, when combined with the elements of 
the independent claim, are also not disclosed or suggested in 
the cited references. 

Claim 22 

The cited references do not disclose or suggest: 



10 "A secure computer system, comprising: 

a plurality of computer resources within an 
apypli.cat.ion service provider; 

means for securely connecting each of a plurality of 
client computers to a portion of said plurality of 
15 computer resources in said application service provider 

while isolating said portion of said plurality of 
computer resources from a second portion of said 
plurality of computer resources . 11 
(Claim 20 , emphasis added) 

20 Applicants repeat the arguments for allowability set 

forth above with respect to claim 1, but specifically directed 
to the secure computer system of claim 22. Again, the cited 
references do not disclose a plurality of computer resources 
within an application service provider, nor means for securely 

25 connecting client computers to resources in the application 
service provider while isolating the clients . 
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The Applicants believe that the currently pending claims 
are allowable over the cited references and respectfully 
request the timely issuance of a Notice of Allowance. 

Dated: j \hj 0*4 Respectfully submitted, 

5 ' KLAAS, LAW, O'MEARA & MALKIN, P.C. 



By: 

Gi4^?0 ClWfger/^ "Esq. 
Registration No. 42,422 
1999 Broadway, Suite 2225 
10 Denver, CO 80202 

(303) 298-9888 
Fax: (303) 297-2266 
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